Eye P.A., MetaGeek App, and inSSIDer with MetaGeek Plus can obtain packet captures from several sources.
Windows 802.11ac adapters (Eye P.A., MetaGeek App, inSSIDer)
(These adapters support simultaneous packet capture from multiple adapters in MetaGeek App or Eye P.A.)
Three Spatial Streams (3x3):
- Edimax EW-7833UAC (recommended)
- TP-LINK Archer T9-UH v2 (recommended)
- ASUS USB-AC68
- ALFA Network AWUS1900
- D-Link DWA-192
Two Spatial Streams (2x2):
- Edimax EW-7822 UAC
- Comfast CF912-AC (also known as the Ekahau SA-1 Survey Adapter)
- Linksys WUSB6400M
- ASUS USB-AC53 Nano
- D-Link DWA-182 rev C1
- Edimax EW-7822 ULC
- Edimax EW-7822 UTC
- EnGenius EUB1200AC
- Proxim ORiNOCO 9100
- TRENDnet TEW-805UB
- TP-LINK Archer T4U v2
- TP-LINK Archer T4UH v2
Windows 802.11ax adapters (MetaGeek App only)
(These adapters do not support simultaneous packet capture from multiple adapters due to power draw)
Windows 802.11n adapter (Eye P.A. only)
This adapter is compatible but not recommended because it's 802.11n only.
- RiverBed AirPcap Nx
The AirPcap Nx is a USB wireless packet capture device (802.11a/b/g/n 2x2 MIMO) that overcomes the typical wireless packet capture limitations of Windows. Support for this device is built into Eye P.A.
** The AirPcap Nx was discontinued by Riverbed in late 2017, but it will continue to be supported in Eye P.A. as a packet capture device.
macOS Wireless Diagnostics Tool
The Wireless Diagnostics Tool in macOS makes wireless packet capture very easy. When you are done, you can move the WCAP file into your Windows virtual machine by dragging and dropping the file.
For a step by step guide, see: Wireless Packet Capture with macOS
You can also use Dropbox or BitTorrent Sync to move the file to a Windows machine for analysis.
A video demonstration of packet capture in macOS is available here.
Linux: Normal WiFi Adapter in Monitor Mode
Common Linux tools like airmon-ng and tcpdump can be used to generate PCAP files. Just be sure that your wireless adapter can be put into monitor mode.
Network: Enterprise-Grade AP
Some enterprise-grade APs can generate PCAP files. This can be useful for getting the APs perspective.
______________________________________________________________________________________
^As an Amazon Associate, MetaGeek earns from qualifying purchases using the links above